Raphaël Gertz [Sat, 30 Nov 2019 23:03:33 +0000 (00:03 +0100)]
Add new_ipv4 constructor that build NetAddr::IP object
Prevent read of /etc/resolv.conf by gethostbyname in each NetAddr::IP->new call
Only ban the ip on specified port and protocol
Ban full ip on protocol with more than 5 port tried
Compare length as numeric to have intended proper output
Cleanup
Raphaël Gertz [Thu, 14 Nov 2019 07:37:01 +0000 (08:37 +0100)]
Change whitelist variable type from regexp to hash
Fix journalctl to extract from kernel identifier instead of limited dmesg
Switch to new dovecot/ssh/shorewall matching
Whitelist ipv4 netmask from hash instead of hardcoded values
Remove sshd.service journal parsing